ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://qeel.xyz/gaiw/api.

Database Entry


IOC ID:1555767
IOC: https://qeel.xyz/gaiw/api
IOC Type :url
Threat Type :botnet_cc
Malware: Lumma Stealer
Malware alias:LummaC2 Stealer
Confidence Level : Confidence level is elevated (75%)
ASN:AS14956 ROUTERHOSTING
Country:- US
First seen:2025-07-10 18:00:30 UTC
Last seen:2025-11-08 07:15:32 UTC
UUID:c43970cc-5db7-11f0-a7f6-42010aa4000a
Reporter abuse_ch
Reward 50 credits from anonymous
Tags:Lumma
Reference: https://bazaar.abuse.ch/sample/c274185e13298d575107ab0d0ab557e281c968340c1a943911440167753e4516/

Avatar
abuse_ch
lumma (aka LummaC2 Stealer) botnet C2